Mitigating the performance impact of strong hashes with Basic HTTP authentication

I am trying to decide which work factor to use for our hashed passwords, and I am facing the following dilemma. Let me elaborate for a moment.
Basic HTTP authentication works as follows:

The user tries to access a protected resource.
The … Continue reading Mitigating the performance impact of strong hashes with Basic HTTP authentication

How to improve enterprise password security?

In this video for Help Net Security, Darren Siegel, Product Specialist at Specops Software, talks about the importance of password security and what makes them vulnerable. He also outlines common password practices and gives tips on how to make sure yo… Continue reading How to improve enterprise password security?

Is it possible to design a system with two passwords?

Is it possible to design a system with two passwords prompts?

The system will have to prompt for two passwords
The system would have to validate first password before prompting for second password
User cannot be prompted for second passwo… Continue reading Is it possible to design a system with two passwords?